
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/5B8CDC02351211F09D579B64C4F9AE02.roa
File: 5B8CDC02351211F09D579B64C4F9AE02.roa (raw, json)
Hash identifier: 1bAgWcJLlliVR0f1esq/e37v/i+ofAYAVlxnxD5PONo=
Subject key identifier: BB:6E:9C:84:3D:D0:59:8B:8C:5A:C4:6E:8B:C7:9E:32:D3:5E:65:32
Certificate issuer: /CN=A9134172/serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
Certificate serial: 0A4B
Authority key identifier: F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/5B8CDC02351211F09D579B64C4F9AE02.roa
Signing time: Tue 20 May 2025 00:35:41 +0000
ROA not before: Tue 20 May 2025 00:35:41 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 9513
IP address blocks: 203.83.64.0/18 maxlen: 18
203.83.64.0/19 maxlen: 19
203.83.65.0/24 maxlen: 24
203.83.72.0/22 maxlen: 22
203.83.72.0/24 maxlen: 24
203.83.73.0/24 maxlen: 24
203.83.74.0/24 maxlen: 24
203.83.75.0/24 maxlen: 24
203.83.78.0/23 maxlen: 23
203.83.84.0/24 maxlen: 24
203.83.96.0/19 maxlen: 19
203.83.96.0/22 maxlen: 22
203.83.110.0/24 maxlen: 24
203.83.111.0/24 maxlen: 24
203.83.114.0/23 maxlen: 23
203.83.116.0/22 maxlen: 22
203.83.116.0/23 maxlen: 23
203.83.118.0/24 maxlen: 24
203.168.132.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl
rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Oct 2025 20:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2635 (0xa4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134172, serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
Validity
Not Before: May 20 00:35:41 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=682bce5d-747e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7c:0d:72:8d:3c:eb:78:02:6f:fb:43:01:63:
c1:2f:93:7c:03:46:0d:89:35:67:be:d9:ef:10:8a:
62:e9:73:17:82:37:90:61:c4:73:b5:78:8d:fe:21:
b2:f0:fd:34:83:b3:6b:10:c4:96:28:41:4d:3b:b9:
a2:7f:cc:96:01:86:f8:96:8f:0a:85:ce:f8:9a:12:
55:cd:69:00:44:55:45:d5:fb:c8:f7:7b:81:f9:f7:
73:12:ae:6b:c5:2f:2c:49:e5:03:36:e3:a8:5b:de:
ef:63:35:ef:95:a0:1f:ad:e8:e9:4e:71:b9:54:3b:
15:c7:8b:66:4e:22:98:10:94:e2:71:90:85:5a:3f:
90:4a:11:4c:c9:da:53:3e:9b:80:d9:61:f1:10:2d:
a4:f7:c7:b4:8d:04:42:b0:04:02:40:55:5f:24:f5:
0a:d6:b6:ba:29:ac:d6:ca:e5:8a:aa:89:a7:01:09:
44:db:b8:4e:cd:06:98:a7:c1:7b:81:7a:f4:c2:75:
c9:78:0d:04:1d:59:db:8b:75:46:5e:63:bf:c2:58:
19:d8:28:8f:a0:ee:18:65:34:85:0a:d3:49:d0:fc:
d3:fe:7f:eb:18:6b:df:09:16:23:33:b2:7b:58:1c:
6e:66:39:f5:04:19:0f:4f:04:9f:21:8d:8d:2a:fb:
74:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:6E:9C:84:3D:D0:59:8B:8C:5A:C4:6E:8B:C7:9E:32:D3:5E:65:32
X509v3 Authority Key Identifier:
keyid:F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/5B8CDC02351211F09D579B64C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.83.64.0/18
203.168.132.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:c4:35:a6:2f:3f:19:be:58:04:c5:cd:4f:f8:a0:4e:2f:48:
4b:1e:2f:54:c2:30:58:5b:02:a5:06:97:aa:ed:d2:3c:65:96:
39:b7:67:d8:d7:8e:54:55:d9:2f:05:47:bf:9b:e7:58:be:a2:
a2:24:41:1c:4f:7c:8e:d1:6d:a1:6c:ee:3c:15:94:af:ca:3e:
71:68:61:52:05:95:3d:fa:e7:46:89:ca:95:00:f0:05:df:ba:
9d:40:d2:7c:b5:4a:b8:01:be:69:da:c3:eb:65:4f:32:1e:84:
26:71:6c:5b:4a:d4:4e:fd:c9:ed:a7:41:10:c1:4a:17:f0:10:
a9:5f:f1:7a:f1:90:f0:11:8b:99:dc:fc:3e:ae:02:4f:38:3d:
e7:a5:9c:02:ce:a0:a7:a9:d6:ae:1b:b7:14:38:cd:c5:c1:82:
dc:36:6f:e3:86:8b:55:1a:38:2c:7f:ea:32:6e:03:9e:b1:d2:
ec:e1:a4:26:18:f1:2c:4a:a6:11:9b:c9:4f:49:d3:d9:38:ac:
f7:46:54:21:b4:cc:65:69:2e:3c:f1:61:6f:20:d8:61:9c:e8:
fa:07:65:70:38:9b:6b:9c:4c:91:3b:11:5e:ee:1f:60:e5:2e:
ab:d4:aa:38:4a:d1:81:c7:59:8c:61:9c:49:52:06:ff:f5:89:
27:5c:33:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 07:03:33 2025 by rpki-client